beginning demo client code, fix session elevation attack
protocol functions, demo client code advances, verification code
authentication callout basics
merge to CI
move to association based auth